JavaScript Python HTML CSS Other
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
.github Update ISSUE_TEMPLATE.md Jun 15, 2017
alerts Fix spelling error in trace alert May 22, 2018
benchmarking Remove leftover javascript comment line Jan 5, 2018
bot Update slack bot message text Apr 13, 2018
config Update nginx config to use off for access log Apr 4, 2018
cron Update es cache cron script to remove http in request May 22, 2018
docker Add disable create index and delete index in docker conf May 2, 2018
docs Remove myo integration Apr 10, 2018
examples Remove extra line after copywrite date Jan 4, 2018
lib Add logic to handle 0 as float in toUTC May 17, 2018
loginput Remove extra line after copywrite date Jan 4, 2018
meteor Remove cif from web interface May 17, 2018
mq Convert value to string for cloudtrail plugin May 8, 2018
rest Remove extra line after copywrite date Jan 4, 2018
static Remove heatmap html page Jun 15, 2017
systemdfiles Naming Convention and Logging Changes. Oct 4, 2017
tests Fix spelling error in trace alert May 22, 2018
.gitignore updated dots to underscores Aug 25, 2017
.travis.yml Increase travis ES version to 5.6.7 Mar 6, 2018
CONTRIBUTING.md Modifying urls to point to mozilla from jeffbryner, slight readabilit… Jun 15, 2017
LICENSE Updated license file to conform with MPL Feb 25, 2014
Makefile Add new command for removing tests containers Feb 9, 2018
README.md [Docs] - Mozilla/MozDef - README.md - changing markdown layout Jan 4, 2018
requirements.txt Merge pull request #632 from mozilla/elasticsearch_5 Apr 5, 2018

README.md

Build Status Documentation Status

MozDef: The Mozilla Defense Platform

Why?

The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders are usually limited to wikis, ticketing systems and manual tracking databases attached to the end of a Security Information Event Management (SIEM) system.

The Mozilla Defense Platform (MozDef) seeks to automate the security incident handling process and facilitate the real-time activities of incident handlers.

Goals:

  • Provide a platform for use by defenders to rapidly discover and respond to security incidents.
  • Automate interfaces to other systems like bunker, banhammer, mig
  • Provide metrics for security events and incidents
  • Facilitate real-time collaboration amongst incident handlers
  • Facilitate repeatable, predictable processes for incident handling
  • Go beyond traditional SIEM systems in automating incident handling, information sharing, workflow, metrics and response automation

Status:

MozDef is in production at Mozilla where we are using it to process over 300 million events per day.

DOCS:

http://mozdef.readthedocs.org/en/latest/